a null pointer dereference in the my_decimal::to_binary() function, located in sql/my_decimal.cc at line 206.

This MariaDB vulnerability arises from a null pointer dereference in the my_decimal::to_binary() function, located in sql/my_decimal.cc at line 206. The crash occurs because this is nullptr, yet the function attempts to call my_decimal2decimal(this, &rounded) without checking for null. This issue can be triggered during sorting operations (filesort.cc) on decimal fields, potentially leading to a segmentation fault and denial-of-service (DoS) via crafted SQL input.